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(54) Abstract Title 

Digital watermarking method wherein data bits are embedded in a digital material by addition or 
subtraction of a transforming matrix 



(57) A method of embedding data in material, which material is represented by digital samples, the method 
comprises the steps of: defining a matrix 4>; selecting a block of samples having the same dimension as the 
matrix O, the values of the samples of the block forming a matrix of value C; and embedding a bit b of the data 
in the block by combining C and 4) to form a matrix Cs, wherein Cs = C+<t> represents a first value of the bit and 
Cs = C-<P represents a second value of the bit. Further steps determine whether the embedded bit results in a 
valid matrix Cs. In some cases if the matrix would be invalid, a dummy bit may be embedded or matrix C may 
be clipped. 

A corresponding method of decoding comprises the steps of: determining the matrix O; selecting a 
block the values of the samples in the block forming a matrix Cs, calculating Cs + O and Cs - 4>; calculating a 
function k=<Cs, <t»; and decoding the value of the encoded bit; wherein if k>0 then the encoded bit b has the 
first value and if k<0 the said bit b has the second value. Further steps check whether the bit is valid. 

The above steganographic ("watermarking") method is preferably applied to image data, for example 
acting on 8-bit image data such that a block is formed from a number of pixels and elements of the block take 
values in the range 0-255. The method may apply to video, audio or data material. 
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Embedding Data in Material 

The present invention relates to embedding data in material. Embodiments of 
the present invention relate to steganography. 

In the embodiments of the present invention steganography is the embedding of 
5 data into material such as video material, audio material and data material in such a 
way that the data is imperceptible in the material. 

Steganography in the form of embedding data in an image is known from for 
example Spread Spectrum Image Steganography by Lisa M. Marvel et al, IEEE 
Transactions on Image Processing Vol. 8, No 8 August 1999, pages 1075 to 1083. In 
10 this technique, random noise is modulated by data to produce a modulated noise 
signal, and the modulated noise signal is applied to an interleaver before adding to the 
image. The data may be encrypted before it modulates the noise. The interleaver 
reorders the signal to prevent group or burst errors in the signal. 

According to one aspect of the present invention, there is provided a method of 
15 embedding data in material, which material is represented by digital samples, the 
method comprising the steps of: 

a) defining a matrix <&; 

b) selecting a current block of samples having the same dimension as 
the matrix O, the values of the samples of the block forming a matrix of 

20 value C; and 

c) combining C and O to form matrices 

Cs = C+O which represents a first value of the bit and 
Cs = C-O which represents a second value of the bit and 
calculating k= <C,<D> and m = <0>,O>; 
25 d) determining whether both matrices Cs are valid and -m<k<+m; 

e) if neither matrix Cs is valid selecting the next block, and repeating 
steps a) to g); 

f) if both matrices are valid and -m<k<+-m, combining C and <X> to form 
the matrix Cs in which the desired data bit value is embedded; and 
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g) otherwise, either using one of Cs = C+O and Cs = C-O to embed a 
dummy bit, selecting the next block and repeating steps a) to g) or clipping the values 
of the samples in the current block and repeating steps a) to g) on the current block. 

According to another aspect of the present invention, there is provided a 
5 method of decoding data bits b embedded in material by the method of said one aspect, 
comprising the steps of: 

a) determining the value of the matrix C>; 

b) selecting a block, the values of the samples in the block forming a matrix 
Cs; 

1 0 c) calculating Cs+$>, Cs-O, m = <d>,0» and k s =<Cs, 0>; 

d) if neither Cs+<D nor Cs-O are valid, move to next block and go back to (a) 
otherwise, if k>0, decoding the bit b embedded in Cs as the bit of the first 
value and if k s < 0 decoding the bit embedded in Cs as the bit of second value; 

e) restoring the original matrix Cr = Cs-<1> if the bit b has the first value and 
15 Cr = Cs+<£ if the bit has the second value; 

f) calculating k r =<Cr, <E»; and 

g) if-m<kr<m and both Cr -O and Cr+<t> are valid, b is a data bit, otherwise b 
is a dummy bit, so move to next block and repeat steps a) to g). 

Thus data is embedded in material by altering sample values according to the 
20 value of the matrix O. The original values of the samples can be restored using O. 

In a preferred embodiment, the blocks are chosen pseudo randomly. The 
pseud'o random selection is made using a sequence of pseudo random numbers 
generated from a key. To decode the data the key and the matrix <S> must be available 
at the decoder. A smart card may store the key and matrix O for transfer to the 
25 decoder. 

The material is preferably an image. 

The invention may be used as a fragile watermark. The watermark is fragile 
because processing of the image, such as compression may destroy the embedded data. 
The invention is currently preferred to be used for embedding data in material. Large 
30 amounts of data can be embedded in an image with a wise choice of matrix <D. Matrix 
O can have any value but in practice, the numbers forming O should be small 
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compared to the maximum value of image samples forming the matrix C. Most 
preferably the numbers are small compared to the average sample value of the image. 
Most preferably, the matrix O selects samples which are likely to be correlated in an 
image. 

5 

For a better understanding of the present invention, reference will now be made 
by way of example to the accompanying drawings in which: 

Figure 1 is a flow diagram of a method in accordance with the invention of 
embedding data in an image; 
10 Figure 2 is a flow diagram of a method in accordance with the invention of 

decoding and removing data embedded in an image; 

Figure 3 schematically illustrates pseudo random image blocks; 
Figure 4 is a schematic representation of a processor for carrying out the 
method of Figures 1 and 2; and 
1 5 Figure 5 illustrates a data structure. 

Mathematical Background 

The following illustrative description assumes a basic knowledge of 
matrices. It refers to a matrix <D which is a non-zero matrix and to a matrix C which 
has the same dimensions as <P. 
20 An inner product <C, <t» is defined where the inner product is 

<c,o>=Xc,A,- 

2 3 1-1 
For example if C = and <P = 

y 4 5 -11 

then the inner product <C, 0»= 2.1 +3.-1+4.-1+5.1=0. 

The inner product is only one example of a function <C, 0> which is usable in 
25 the present invention. Other functions are possible provided they satisfy: 

(i) <C + 0,0> = <C,<t» + 

(ii) <C - 0>,®> = <C,0> - 

(iii) <0,0> > 0 if O is a non-zero matrix but preferably the sum of the numbers 
in the matrix is zero. 
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The matrices C and 0> are also added. Thus for example using the same 
matrices as given above for C and O 

r, ~ 2 + 1 3 "! 

c+o= 

4-1 5+1 
Values k and m are also used where 
5 k = <C,®> and 

m - <0,C». 
Overview 

In the following examples data is embedded in an image so as to be 
imperceptible in the image. The image is a digital image in which, in the following 
10 examples, each pixel is represented by an 8 bit number. A pixel has only a positive 
value ranging from 0 to 255. A "valid" pixel , is one having a value in that range. 
Such a valid pixel may be an unmodified pixel (i.e. a pixel to which no data is added) 
or a modified pixel (i.e. a pixel to which data is added). 

The image is divided into blocks of pixels. The blocks have the same 
15 dimensions as the matrix <J>. The pixel values of the blocks form the matrix C. In 
preferred embodiments the blocks are a pseudo random selection within the image. 
The image may be a still image or a frame or field of a video image. 

The matrices C and <t> may have any suitable dimensions. However the 
invention operates better if the pixels forming the matrix C are correlated in the image. 
20 Thus, most preferably, the pixels forming matrix C are adjacent. 

-.A block or matrix is valid only if all the pixels of the block or matrix are valid. 
The following description refers to "dummy" bits and "valid" bits. A valid bit is 
a bit encoded in a block where the following conditions are satisfied: 
both C + O and C - O result in valid blocks and -k<m<+k. 
25 In the following examples, 

Cs = C + O represents a bit of value 1 and 
Cs = C - <t> represents a bit of value 0. 
If the said conditions are not satisfied, the decoder cannot correctly decode the bit and 
restore the original image. A dummy bit may be encoded in a block where the said 
30 conditions are not satisfied. 
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Detailed description of preferred embodiments . 

The algorithm divides the image into a number of blocks with the intention that each 
block will be used to store one message bit. So suppose that we wish to embed one bit, b, 
into an image block, C. 

Let O be a non-zero matrix with the same dimensions as C and suppose that 
<C,O>=0, where this inner product could be any appropriate matrix inner product, 
such as: 

(1) <A,B>=J j a ij b iJ 

Then consider the following equation that produces a stego-image block, C s , at the 
encoder: 

f C + O if b = 1 

(2 > c -={c-o if*=0 ■ 

At the decoder, we calculate the quantity k as follows: 

(3) k =< C s , O > 

" ,. .. 

If b = 1 then k = < C + <!>,<£ > = < C,0 > + < 0,0 > = <<J>,0 >, and so k is positive. 
Similarly, if b = 0 then k = - < 0,0 > which is negative. Hence by looking at the sign 
of k, we can determine the message bit. Knowing this, we can form the reconstructed 
version of C, C,, either by subtracting * from C, if we discover that b = 1 , or by adding 
to C s if we discover that b = 0 . Doing this returns the correct value of b and ensures 
that C r =C. 

It is possible to make this algorithm more general by relaxing the initial constraint of 
<C,<E> >=0 to be 

(4) |<C,<J>>| < <0,0> 

There are two fundamental problems which must be overcome if this algorithm is to be 
practicable: 

(a) assuming that O is fixed, we cannot guarantee to satisfy condition (4) 

(b) we cannot guarantee that both C + # and C-O are valid images. 



GK) because <C, <E» = 0 as stated at (1) above. 



We tackle problem (a) first. If < C,4> > > < *,* > then we can let C, = C + <D . This 
makes k positive and so at the decoder, we will deduce that b = l and that 
C =C -O = C. Therefore we will be able to restore the original image, but if our 
original bit was a 0 then we will have decoded b incorrectly. Consequently, once the 
image has been restored, the decoder checks for condition (4): if it is satisfied then the bit 
is valid; otherwise it is a dummy bit and should be ignored. Similarly, if 
<C,$> < -<0,0> then we let C s = C - O . Again, we can reconstruct the original 
image correctly, but we must check for a dummy bit. 

The insertion of dummy bits does increase the overall number of bits which must be 
embedded into the image. In general though, if <t> is chosen well then the number of 
dummy bits will be a small fraction of the overall payload. 

Problem (b) arises from the fact that we are constraining ourselves to, say, 8-bit image 
data If neither C + 4> nor C - O are valid images then we can leave C as it is. Then at 
the decoder, since O can be neither added nor subtracted from C s , we know that nothing 
has been done to this image block. 

We are now left with the situation where just one of C + O or C-* is invalid. So 
assume that only C + <t> is invalid. There are two situations which can arise: 

±c 

(a) if <C.O> < then letting C s =C-<*>. we find that 
k =< C - O. <D > < 0 . We therefore detect that we need to add <J> to C 5 in order 
to restore to C. We can then examine C to determine whether we were 'forced' to 
subtract <D from C due to the invalidity of C + O . 

(b) .if <C,<D>><<J>,C>>, then letting C s =C-0, gives that 
\ =< C > > 0 . This time we would deduce that we need to subtract $ 
from C, in order to restore to C. However, this is incorrect, and we would 
reconstruct not as C but as C - 2* . Similarly, if we leave C alone then we would 
reconstruct as C-O? . , , , 



0 To solve this problem, block C is clipped so that both C+G> and C-O are valid. 

The embedding of the data in the block is then repeated on the clipped value. 
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Encoding Algorithm. Figure 1. 

I. At steps SI to S6: 

Check whether the image blocks C + 4> and C-<$> form valid images. If C + O is 
valid then AddValid is set to true; otherwise AddValid is set to false. If C-<£> is 
^ valid then SubtractValid is set to true; otherwise SubtractValid is set to false. If 
AddValid OR SubtractValid, then proceed to step III; otherwise, proceed to step II. 

II. If steps S3 and S6 are both set to false indicating that both C+ <p ana CJ-v 
are not valid, then step S7 determines that no data can be embedded in the current 
image block and processing proceed to the next image block at step SO. 

10 If at least one of steps S2 and S5 are set to true then step S7 determines that at 

least one value of the data bit results in valid pixel values. 
Step S8 calculates k=<C, 0> and m=< ®, 0». 
Step S9 determines whether -m<k<+m. 
Steps S8 and S9 thus determine whether the constraint (4) above is satisfied. 
15 III. If the constraint is satisfied and both steps S2 and S5 are set true as 

tested at step S 10 then the data bit results in valid values whether 

a) it is b=l and Cs=C + O as set at steps SI 1 and 12; or 

b) it is b=0 and Cs=C - <D as set at steps SI 1 and 13. 

IV. If step S 10 determines that only one of steps S2 and S5 is set true, then 
20 a dummy bit is provided in the block. Step S14 tests whether AddValid was set true at 

step S2. If AddValid is true then Cs=C + O (S15) and the dummy bit is 1; and if not 
Cs=C - $ (SI 6) and the dummy bit is 0 The procedure then moves to the next block at 
step SO. 

V. Returning now to step S9, if -m<k<+m is not true, step S17 tests 
25 whether k>=m; that is whether <C, <t» >=.«&, 0>? If that is true, then if at step SI 8, 

AddValid is true, Cs=C + <E> (S20) and the dummy bit is 1 . If k>=m is not true at step 
S17and if at step S19 SubtractValid is true, then Cs=C - <D (S21) and the dummy bit is 
0. The procedure then moves to the next block at step SO. 

VI. If neither AddValid at step S18 nor SubtractValid at step S19 is true, 
30 then at step S22 the pixel values are clipped so as to allow both C+O and C-<I> to be 

valid. For 8 bit numbers, that is done by clipping values greater than 253 to 253 and 



clipping values less than 2 to 2. The procedure then moves back to step SI and repeats 
on the same block but uses the clipped values. 

Decoding Algorithm. Figure 2 

<D is preset at the decoder. 
5 I. Steps S3 1 to S36,operate on Cs+<D and Cs-0,.At steps S3 1 to S36 

Check whether the image blocks C,+0 and C s -O form valid images. If 
C, +<J> is valid then AddValid is set to true; otherwise AddValid is set to false, if 
C s -<J> is valid then SubtractValid is set to true; otherwise SubtractValid is set to 
0 false. If AddValid OR SubtractValid, then proceed to step III; otherwise, proceed to 

step II. 

II. If steps S33 and S36 are both set to false indicating that both (Cs+ O) and 
(Cs-O) are not valid, then step S37 determines that no data was embedded in the 
current image block and processing steps to the next image block at step S30. 

If at least one of steps S32 and S35 are set to true then step S3 7 determines that 
1 5 at least one value of the data bit results in valid pixel values. 
Step S3 8 calculates k=<Cs, 0>. 

III. Step S 39 tests whether k>0? 

If k>0 then the bit value is 1 and the original pixel value Cr is restored as Cr = Cs - 0>. 

(540) . 

20 If k<0 then the bit value is 0 and the original pixel value Cr is restored as Cr = Cs + O. 

(541) . 

'■IV. Steps S42 to S47 test whether using the restored pixel values embed 
bits results in valid values i.e. whether Cr + <D. and Cr - O are valid. Step S42 
calculates Cr + O and tests whether Cr + O is valid (AddValid true). Step S43 
25 calculates Cr-0> and tests whether Cr - O (SubtractValid true) is valid. Steps S44, S45, 
S46 and S47 set flags indicating whether AddValid and SubtractValid are true. 
Step S48 tests whether both AddValid and SubtractValid are true. 
Step S49 calculates k=<Cr, d» and m=«l>,a». 
Step S50 tests whether -m<k<+m. 
30 If steps S48 and 50 are both true, then the decoded bit is a valid bit. The 

procedure then steps to the next block at step S30. 
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V. Referring to step S48, if only one of AddValid and SubtractValid for is 
true then the block encodes a dummy bit and the procedure steps on to 
the next block at stepS30. 

VI. Referring to step S 50, if both of AddValid and SubtractValid for are 
true, but m<k<+m is not true (that is |<Cr,0»| >=< <D,0>) then the 
block encodes a dummy bit and the procedure steps to the next block at 
stepS30. 
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Worked Examples 

The block size for this example is 4x3 and the form of <t> is given in ~p 3 below: 
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y~3 - form of <P 

10 Then < CO > = 2(c, -c 2 ), where c, and c 2 are the image pixel values at the locations 
corresponding to the 2 and -2 in the block. Due to the spatial correlation of the image, we 
expect that c, and c 2 should be similar in value and hence | < CO > | should be quite 
small. Clearly, other forms of $ are possible, making use of the spatial correlation. Note 
that <<£,<!> >=8. 

Suppose that we wish to embed a 1 and that the image block C is as in ' T below: 
15 _ 



# 


# 


# 


# 


# 


80 


83 


# 


# 


# 


# 


# 



T4 - initial C 

Then | < C,<P > | = |2(80- 83)| = 6. Since we have |<C,0>| < <0,<t>> and it is 
possible to both add and subtract we set C 5 = C + <t> . as in _ ~J~5 below: 
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T-5 - resultant C s 

At the decoder, we calculate £ = <C J ,«I>> = 2(82-81) = 2. Since £ is positive, we 
deduce we need to subtract O from C s in order to restore the original block. We now 
have C r =C. Again, we have |<C r ,<I>>| < <$>,$>> and it is possible to both add 
and subtract <I>. Therefore we deduce that the bit is a message bit and not a dummy bit. 
Since k is positive, the message bit is a 1. 
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2. For the same block size as in T4 and for the same value of <£ as given in 
T3, ®=[2, -2], assume C=[3, 1] and the bit b to be embedded is b=l. Then referring to 
steps SI to S6 in Figure 1, C+0=[5, -1] which is invalid, and C-0=[1, 3] which is 

5 valid. 

At step S7 only one of AddValid and Subtract Valid is true. 
At step S8, k=6 - 2=4 and m= 4 + 4 =8. 

Thus at step S9 -m<k<m (-8<4<8). But at step S10 only one of AddValid and 
Subtract Valid is true so a bit is coded as a dummy bit b=0 at step S16 because only 
10 SubtractValid is true. Thus Cs=[l, 3] 

Referring to Figure 2, steps S31 and S34, calculate Cs+O and Cs-O. ®=[2,-2] 
Thus Cs+<D=[3, 1] and Cs -<D =[-1, 1]. Thus only AddValid for Cs + O is true 
in steps S32 to S37. 

At step S3 8, k=<Cs, <D> = 2 - 6 =-4 is negative at Step S 39 so at step S41 b=0 
15 and Cr = Cs + O = [3,1]. 

Steps S 42 to S48 show that Cr + <t> is invalid and Cr - <J> is valid and so the bit 
is a dummy bit. The decoding process thus steps to step S30 for the next block. 

3. Assume <D = [2, -2] and C- [255,250]. 

20 Referring to Figure 1, steps SI to S6, C + d> = [ 257, 248] which is invalid 

because 257 is greater than the largest possible pixel value of 255 for 8 bit pixels but 
C - <D= [253, 252] which is valid Therefore only one of AddValid and Subtract Valid 
is true at step S7. 

At step S8, k= 510 - 500= 10 and m = 8. 
25 At steps S9 and S17 k > m. At step S18 AddValid (C + <D) is not true, so at 

step S22 the pixel value of 255 is clipped and the process returns to step SI and repeats 
on the same block but operates on the clipped value which may result in valid 
encoding of a bit in the block. 

30 4. Assume <D - [2, - 2] and C = [ 1 00,200] . 

Referring to Figure l.steps SI to S6, C + O = [102, 198] which is valid. 
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C - 0= [98, 202] which is valid. Therefore at least one of AddValid and Subtract 
Valid is true at step S7. 

At step S8, k= 200 - 400= -200 and m = 8. 

At steps S9 and S17 k <-m. At step S18 AddValid (C + <D) is true, so at step 
5 S20 Cs= (C + O) = [102, 198] encoding dummy bit b=l and then the process steps to 
step SO for the next block. 

Referring to Figure 2, at steps S31 to S37, Cs + O = [102, 198] which is valid 
and Cs - <E>=[98, 202] which is also valid. So, at least one of AddValid and 
SubtractValid is true at step S37. At step S38, k= 200-400 = - 200. At step S39 k<0 so 
10 bit b=l (S40) and Cr = [100, 200]. Steps S42 and S43 reveal that Cr + O =[102, 198] 
is valid and (Cr - O) = [98, 202] is also valid. However, steps 49 and 50 show k< - m 
so the bit is a dummy bit and the procedure steps to step S30 for the next block. 

In preferred embodiments of the invention, the blocks C to be encoded are 
chosen at random throughout an image as shown in Figure 3. Steps SO and S30 then 
15 comprises selecting the next block in a pseudo-random sequence of blocks. The 
sequence may be defined in known manner using a key, which defines the pseudo- 
random sequence. That key, like <D, is available at both the encoder and the decoder. 

Illustrative system . 

20 Referring to Figure 4 a system for encoding comprises a data bus 100 to which 

there are coupled a processor 102, a frame store 104 for storing a digital image, other 
system memory 106, an interface 108. a data input device 1 10 and an analog to digital 
converter 112. An analogue image is digitised by the A/D converter 1 12 and stored in 
the frame store 104. The processor operates according to Figure 1 to embed data in the 

25 image. The data may be a message entered via the input device 110 which is e.g. a 
keyboard. The encoded image may be output to a transmission channel via the 
interface 108. The processor determines the selection of blocks using a sequence of 
pseudo random numbers generated from a key. Also the processor determines the 
values in the matrix G>. The key and matrix <D are needed to decode the embedded data 

30 and to restore the original image. Thus for example, the encoder has a smart card 
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interface 1 14 for receiving a smart card SC. The key and matrix <D are stored in the 
card for transfer to the decoder. 

The decoder may have the same structure as the encoder, receiving an encoded 
image via the interface 108, and the key and matrix O from a smart card SC inserted 
into the interface 1 14. The processor 102 operates according to Figure 2. The image is 
stored in the frame store for that purpose. The A/D converter 1 12 of the encoder may 
be replaced by a D/A converter in the decoder. 
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Modifications. 



a) As in 7*3, a border can be left around the non-zero elements of O. The 
corresponding image block pixels will therefore be unaffected by the 
steganographic process. It is therefore possible to use them for measuring the 
activity in the block and <t> can be scaled accordingly - the larger the activity, the 
larger the values of O. This has two distinct advantages, namely (i) with large 
activity, the value of | < C,<& > | is likely to be larger, so a larger O will be required 
for condition (4) to be satisfied and (ii) with larger activity, larger pixel changes can 
be made whilst maintaining visual quality. 

b) It is possible to make use of the above border in another way. In order to avoid 
boundary problems, where either C + <$> or C - O are invalid, the border pixels can 
be examined. If any of them take too large or too small a value, then it is possible 
that some of the changed pixels may also take too large or too small a value once <t> 
is 'applied', causing a boundary problem. On the other hand, if the border pixels- 
take 'average' values then the pixels to be altered are likely to assume 'average' 
values too. Thus by checking border pixels for 'near-extreme' values, the 
likelihood that a boundary problem occurs is reduced. 

c) It is possible to insert headers into the message, each header specifying the number 
of message bits which are encoded prior to the next occurrence of a boundary 
problem. In this way, all boundary problems are concentrated on the locations 
where the header bits are recorded. Although this does increase the overall number 
of bits to be embedded, the likelihood of lossless image reconstruction is increased. 
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The data to be embedded may include a data structure as outlined in Figure 5. 
The header contains h bits where h is 8 for example. Blocks are selected for the 
embedding of data as described above. The first set of h blocks in which valid data 
bits are embeddable are assigned to the header data. Subsequent blocks are selected 
and examined to determine if valid data bits can be embedded. A block which cannot 
contain a valid data bit is skipped. The header contains a number indicating the 
number of the skipped blocks counting from the first block after the header. After the 
skipped block, a new header is provided over the next h blocks for indicating the next 
skipped block. 

To encode and decode messages, the value of G> and the key to the pseudo- 
random selection of blocks are required. Both need to be available at the encoder and 
the decoder. They provide security against unauthorised decoding. The value of G> and 
then key may be stored in e.g. a smart card which is secure and the processor 102 of 
Figure 4 accesses the key and O on the smart card via a suitable interface in known 
manner. Other secure ways of transferring the key and matrix <£> to the decoder may be 
used; for example they may be transferred in encrypted form over a communications 
network. 

If a message has a greater number of bits than can be encoded in the number of 
valid blocks available in an image then the bits which are not encoded in the blocks 
may be encoded in pixels using the techniques of altering least significant bits or some 
other known suitable technique. 

-. Whilst the embodiments of the invention described herein refer to matrices or 
blocks of dimension 1x2, other dimensions may be used. 
For example, matrix O may be : 
0 0 0 0 

3 0 0 0 0 1 

a) or b) or c) 0 0 0 0 0 0 . Those are merely 

0 -1 0000 ' n n n „ 

-1 0 0 0 0 -3 

examples. Matrix c) is not a good choice because the non zero numbers which select 
image pixels are far apart and unlikely to be correlated. However such a matrix could 
be used in principle. Blocks such a b) which have zero borders may have overlapping 
borders provided the non-zero values do not overlap. 
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Whilst the embodiments of the invention described herein refer to images, the 
invention may be applied to audio material, and other data material. Image material 
may be still or moving images. 
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CLAIMS 

1, A method of embedding data in material, which material is 

represented by digital samples, the method comprising the steps of: 

a) defining a matrix O; 

b) selecting a current block of samples having the same dimension as 
the matrix O, the values of the samples of the block forming a matrix of 
value C; and 

c) combining C and O to form matrices 

Cs = C+O which represents a first value of the bit and 
Cs = C-O which represents a second value of the bit and 
calculating k= <C,0> and m = <0,0>; 

d) determining whether both matrices Cs are valid and -m<k<+m; 

e) if neither matrix Cs is valid selecting the next block, and repeating 
steps a) to g); 

f) if both matrices are valid and -m<k<+m, combining C and O to form 
the matrix Cs in which the desired data bit value is embedded; and 

g) otherwise, either using one of Cs = C+O and Cs = C-O to embed a 
dummy bit, selecting the next block and repeating steps a) to g) or clipping the values 
of the samples in the current block and repeating steps a) to g) on the current block. 

•2. A method according to claim 1, wherein if -m<k<+m is not true and at 
least one of C+O and C-O is true, the samples of the current block are 
clipped if a dummy bit is not valid in the block. 

3. A method according to claim 2, wherein k>=m is tested and if k>=m is 
true then C+O is embedded as a dummy bit if it is valid and if k>=m is not true then 
C-O is embedded as a dummy bit if it is valid. 

4. A method according to claim 1, 2 or 3 wherein the blocks are selected 
pseudo randomly. 
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5. A method according to claim 1,-2, 3 or 4 wherein the said material is an 
image. 

5 6. A method according to any preceding claim, comprising the step of 

storing the matrix O. 

7. A method according to any preceding claim, wherein the data bits b are 
of a data structure having a header section denoting the number of message bits and a 

1 0 value section containing the message bits. 

8. A method of decoding data bits b embedded in material by the method 
of anyone of claims 1 to 7, comprising the steps of: 

a) determining the value of the matrix d>; 
15 b) selecting a block, the values of the samples in the block forming a matrix 

Cs; 

c) calculating Cs+<J>, Cs-<t>, m = <0,0> and k s =<Cs, <D>; 

d) if neither Cs+<X> nor Cs-O are valid, move to next block and go back to (a) 
otherwise, if k 3 >0, decoding the bit b embedded in Cs as the bit of the first 

20 value and if k s < 0 decoding the bit embedded in Cs as the bit of second value; 

e) restoring the original matrix Cr = Cs-O if the bit b has the first value and 
-. Cr = Cs+O if the bit has the second value; 

f) calculating k r =<Cr, 0>; and 

g) if -m<kr<m and both Cr -<D and Cr+O are valid, b is a data bit, otherwise b 
25 is a dummy bit, so move to next block and repeat steps a) to g). 



9. A method according to claim 8, wherein the value of the matrix O is 
determined from a stored value thereof. 

30 

10 A method according to claim 8 or 9, comprising calculating 
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Cr = Cs+O or Cs-O 

depending on the decoded bit value to restore the original value. 

11. A decoding method according to any one of claims 8 to 10, wherein if 
5 k=0 then the data bit is decoded as one of the first md second values. 

12. An embedding method according to any one of claims 1 to 7, wherein 
the data bits are in a data structure comprising a header section and a message section. 

10 13. An embedding method according to claim 12, wherein the header 

identifies the next block after the header which is not used. 

14. A computer program product arranged to carry out the method of any 
preceding claim when run on a computer. 

15 

15. Encoding apparatus arranged to carry out the method of any one of 
claims 1 to 7,12 and 13. 

16. Decoding apparatus arranged to carry out the method of any one of 
20 claims 8 to 11. 

17. A method substantially as hereinbefore described with reference to the 
accompanying drawings. 

25 18. Apparatus substantially as hereinbefore described with reference to the 

accompanying drawings. 

19. A memory device for use with the encoding apparatus of claim 15 
and/or the decoding apparatus of claiml6 the device securely storing 
30 the matrix O. 
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20. A device according to claiml9 further storing a key for generating a 
pseudo random number sequence for selecting blocks. 

21. A device according to claim 1 9 or 20 which is a smart card. 

5 
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